What are common attack vectors such as phishing and ransomware, and how would you defend against them?